← CVE Intelligence

CVE-2021-24970

All-In-One-Gallery < 2.5.0 - Admin+ Local File Inclusion PUBLISHED

Description (CNA)

The All-in-One Video Gallery WordPress plugin before 2.5.0 does not sanitise and validate the tab parameter before using it in a require statement in the admin dashboard, leading to a Local File Inclusion issue

Affected (CNA)

Vendor / productVersions
Unknown / All-in-One Video Galleryaffected 2.5.0 before 2.5.0

CWE

CWE-22

References

ADP enrichment

CVE

No English description supplied.